{"schemaVersion":3,"id":"CVE-2024-10976","aliases":["ALPINE-CVE-2024-10976","UBUNTU-CVE-2024-10976","DEBIAN-CVE-2024-10976","CGA-37h6-2cxj-hqp9","CGA-44hr-xhxj-pqx2","CGA-4p74-3gw5-53qw","CGA-68m5-w3fm-7v6q","CGA-6x2j-q345-88hg","CGA-7cvm-39q7-fhwp","CGA-8c5r-pxp6-v6x4","CGA-fwxc-r9mw-579x","CGA-g7v8-h59h-fhx7","CGA-m93r-w3h4-7969","CGA-mh8p-hfm9-34qh","CGA-p9qw-8p69-6r23","CGA-qc84-595g-cjc6","CGA-v3p8-xfpw-q8gv","CGA-wq3j-v3p2-474x"],"status":"published","duplicateOf":null,"title":null,"description":"Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended.  CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes.  They missed cases where a subquery, WITH query, security invoker view, or SQL-language function references a table with a row-level security policy.  This has the same consequences as the two earlier CVEs.  That is to say, it leads to potentially incorrect policies being applied in cases where role-specific policies are used and a given query is planned under one role and then executed under other roles.  This scenario can happen under security definer functions or when a common user and query is planned initially and then re-used across multiple SET ROLEs.  Applying an incorrect policy may permit a user to complete otherwise-forbidden reads and modifications.  This affects only databases that have used CREATE POLICY to define a row security policy.  An attacker must tailor an attack to a particular application's pattern of query plan reuse, user ID changes, and role-specific row security policies.  Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.","dates":{"published":"2024-11-14T13:00:01.930Z","modified":"2025-11-03T21:51:36.955Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.4,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4.2,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","exploitability":7.2,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","exploitability":7.2,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","exploitability":7.2,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","exploitability":7.2,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","exploitability":7.2,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00769,"percentile":0.54819,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00769},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00769,"percentile":0.54819}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00769,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00769,"percentile":0.54819}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-1250","name":"Improper Preservation of Consistency Between Independent Representations of Shared State","description":"The product has or supports multiple distributed components or sub-systems that are each required to keep their own local copy of shared data - such as state or cache - but the product does not ensure that all local copies remain consistent with each other.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/1250.html"}],"affected":[{"vendor":"alpine","product":"postgresql14","name":"postgresql14","label":"postgresql14","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/postgresql14","purlType":"apk","versions":[{"text":"< 14.14-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.14-r0","eol":null,"hubHref":null},{"vendor":"alpine","product":"postgresql15","name":"postgresql15","label":"postgresql15","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/postgresql15","purlType":"apk","versions":[{"text":"< 15.9-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.9-r0","eol":null,"hubHref":null},{"vendor":"alpine","product":"postgresql16","name":"postgresql16","label":"postgresql16","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/postgresql16","purlType":"apk","versions":[{"text":"< 16.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 16.5-r0","eol":null,"hubHref":null},{"vendor":"alpine","product":"postgresql17","name":"postgresql17","label":"postgresql17","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/postgresql17","purlType":"apk","versions":[{"text":"< 17.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-12","name":"postgresql-12","label":"postgresql-12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-12","purlType":"apk","versions":[{"text":"< 12.21-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.21-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-13","name":"postgresql-13","label":"postgresql-13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-13","purlType":"apk","versions":[{"text":"< 13.17-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 13.17-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-14","name":"postgresql-14","label":"postgresql-14","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-14","purlType":"apk","versions":[{"text":"< 14.14-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.14-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-14-client","name":"postgresql-14-client","label":"postgresql-14-client","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-14-client","purlType":"apk","versions":[{"text":"< 14.24-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.24-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-15","name":"postgresql-15","label":"postgresql-15","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-15","purlType":"apk","versions":[{"text":"< 15.9-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.9-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-15-client","name":"postgresql-15-client","label":"postgresql-15-client","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-15-client","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-16","name":"postgresql-16","label":"postgresql-16","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-16","purlType":"apk","versions":[{"text":"< 16.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 16.5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-17","name":"postgresql-17","label":"postgresql-17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-17","purlType":"apk","versions":[{"text":"< 17.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-12","name":"postgresql-12","label":"postgresql-12","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-12","purlType":"apk","versions":[{"text":"< 12.21-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.21-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-13","name":"postgresql-13","label":"postgresql-13","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-13","purlType":"apk","versions":[{"text":"< 13.17-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 13.17-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-14","name":"postgresql-14","label":"postgresql-14","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-14","purlType":"apk","versions":[{"text":"< 14.14-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.14-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-14-client","name":"postgresql-14-client","label":"postgresql-14-client","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-14-client","purlType":"apk","versions":[{"text":"< 14.24-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.24-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-15","name":"postgresql-15","label":"postgresql-15","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-15","purlType":"apk","versions":[{"text":"< 15.9-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.9-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-15-client","name":"postgresql-15-client","label":"postgresql-15-client","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-15-client","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-16","name":"postgresql-16","label":"postgresql-16","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-16","purlType":"apk","versions":[{"text":"< 16.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 16.5-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-17","name":"postgresql-17","label":"postgresql-17","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-17","purlType":"apk","versions":[{"text":"< 17.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.1-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"postgresql-15","name":"postgresql-15","label":"postgresql-15","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/postgresql-15","purlType":"deb","versions":[{"text":"< 15.9-0+deb12u1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.9-0+deb12u1","eol":null,"hubHref":null},{"vendor":"debian","product":"postgresql-17","name":"postgresql-17","label":"postgresql-17","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/postgresql-17","purlType":"deb","versions":[{"text":"< 17.1-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.1-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-10","name":"postgresql-10","label":"postgresql-10","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-10","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-12","name":"postgresql-12","label":"postgresql-12","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-12","purlType":"deb","versions":[{"text":"< 12.22-0ubuntu0.20.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.22-0ubuntu0.20.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-14","name":"postgresql-14","label":"postgresql-14","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-14","purlType":"deb","versions":[{"text":"< 14.15-0ubuntu0.22.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.15-0ubuntu0.22.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-16","name":"postgresql-16","label":"postgresql-16","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-16","purlType":"deb","versions":[{"text":"< 16.6-0ubuntu0.24.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 16.6-0ubuntu0.24.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-9.3","name":"postgresql-9.3","label":"postgresql-9.3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-9.3","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-9.5","name":"postgresql-9.5","label":"postgresql-9.5","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-9.5","purlType":"deb","versions":[{"text":"< 9.5.25-0ubuntu0.16.04.1+esm10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.25-0ubuntu0.16.04.1+esm10","eol":null,"hubHref":null},{"vendor":"postgresql","product":"postgresql","name":"postgresql","label":"postgresql","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 12.0, < 12.21","noFixRecorded":false,"fixedIn":null},{"text":"≥ 13.0, < 13.17","noFixRecorded":false,"fixedIn":null},{"text":"≥ 14.0, < 14.14","noFixRecorded":false,"fixedIn":null},{"text":"≥ 15.0, < 15.9","noFixRecorded":false,"fixedIn":null},{"text":"≥ 16.0, < 16.5","noFixRecorded":false,"fixedIn":null},{"text":"≥ 17.0, < 17.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 12.0, < 12.21 | ≥ 13.0, < 13.17 | ≥ 14.0, < 14.14 | ≥ 15.0, < 15.9 | ≥ 16.0, < 16.5 | ≥ 17.0, < 17.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"postgresql","label":"PostgreSQL","category":"database"}},"hubHref":"/vendor/postgresql/postgresql"}],"affectedCount":29,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.postgresql.org/support/security/CVE-2024-10976/","label":"www.postgresql.org/support/security/CVE-2024-10976/","hostname":"www.postgresql.org","tags":["REPORT","Advisory","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20250509-0010/","label":"security.netapp.com/advisory/ntap-20250509-0010/","hostname":"security.netapp.com","tags":["Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00011.html","label":"lists.debian.org/debian-lts-announce/2024/11/msg00011.html","hostname":"lists.debian.org","tags":["WEB"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-10976","label":"security.alpinelinux.org/vuln/CVE-2024-10976","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-10976","label":"ubuntu.com/security/CVE-2024-10976","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-10976","label":"www.cve.org/CVERecord?id=CVE-2024-10976","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7132-1","label":"ubuntu.com/security/notices/USN-7132-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7358-1","label":"ubuntu.com/security/notices/USN-7358-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-10976","label":"security-tracker.debian.org/tracker/CVE-2024-10976","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10976","label":"nvd.nist.gov/vuln/detail/CVE-2024-10976","hostname":"nvd.nist.gov","tags":["Oval","Advisory"]}],"lineage":{"upstream":[],"downstream":["DLA-3954-1","DSA-5812-1","MGASA-2024-0372","OPENSUSE-SU-2024:14501-1","OPENSUSE-SU-2024:14502-1","OPENSUSE-SU-2024:14503-1","OPENSUSE-SU-2024:14504-1","OPENSUSE-SU-2024:14505-1","OPENSUSE-SU-2024:14506-1","RHSA-2024:10785","RHSA-2024:10787","RHSA-2024:10788","RHSA-2024:10791","RHSA-2024:10830","RHSA-2024:10831","RHSA-2024:10832","SUSE-SU-2024:4063-1","SUSE-SU-2024:4095-1","SUSE-SU-2024:4096-1","SUSE-SU-2024:4097-1","SUSE-SU-2024:4098-1","SUSE-SU-2024:4099-1","SUSE-SU-2024:4114-1","SUSE-SU-2024:4118-1","SUSE-SU-2024:4173-1","SUSE-SU-2024:4174-1","SUSE-SU-2024:4175-1","SUSE-SU-2024:4176-1","SUSE-SU-2025:01799-1","USN-7132-1","USN-7358-1"],"duplicates":[],"related":["CGA-5HW3-R46M-54J2","CGA-75JQ-9QMC-2XM8","CGA-F262-4R9C-V9GM","CGA-M8C3-C7W3-8J53","CGA-MW2G-HP89-4QG6","CGA-PFG6-V83C-QH4Q","OPENSUSE-SU-2024:14501-1","OPENSUSE-SU-2024:14502-1","OPENSUSE-SU-2024:14503-1","OPENSUSE-SU-2024:14504-1","OPENSUSE-SU-2024:14505-1","OPENSUSE-SU-2024:14506-1","SUSE-SU-2024:4063-1","SUSE-SU-2024:4095-1","SUSE-SU-2024:4096-1","SUSE-SU-2024:4097-1","SUSE-SU-2024:4098-1","SUSE-SU-2024:4099-1","SUSE-SU-2024:4114-1","SUSE-SU-2024:4118-1","SUSE-SU-2024:4173-1","SUSE-SU-2024:4174-1","SUSE-SU-2024:4175-1","SUSE-SU-2024:4176-1","SUSE-SU-2025:01799-1","USN-7132-1","USN-7358-1"]},"timeline":[{"kind":"published","date":"2024-11-14T13:00:01.930Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-11-03T21:51:36.955Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":22,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T19:58:35.115Z","stale":false,"partial":false}}